users@grizzly.java.net

Re: Grizzly 2.x and Basic auth. and Filters

From: Sumit Aneja <sumitaneja_at_msn.com>
Date: Sun, 19 Jun 2016 23:25:30 -0700 (MST)

HI Alexy,
here are my queries, If i have an authentication filter in chain
TransportFilter <-> HttpCodecFilter <-> MyAuthFilter <-> HttpServerFilter.

Filter is executed for all incoming requests. So even if URI of request is
invalid (i.e is not mapping to any URI on grizzly container), MyAuthFilter
gets executed. This seems illogical to me. I would like this MyAuthFilter
to be executed to valid request URI only.


Second in MyAuthFilter i build a subject. How can i pass/set this subject
in AccessController

Usually subject information is retrieved through
javax.security.auth.SubjectSubject.getSubject(java.security.AccessControllerAccessController.getContext()).



If its HTTP container(i.e servlet filter) i invoke rest of filter chain
under privileged code. But in grizzly it allows me to return next Action not
execute.



--
View this message in context: http://grizzly.1045725.n5.nabble.com/Grizzly-2-x-and-Basic-auth-and-Filters-tp4770236p5711045.html
Sent from the Grizzly - Users mailing list archive at Nabble.com.